CVE-2026-74505
In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: Fix UAF at error handling during probe Although 6fire driver had a few fixes for dealing with the early error handling during the probe phase, it forgot a pending URB before freeing the resources, which may lead to a UAF. This patch addresses it by doing the almost same cleanup procedure like the normal disconnect phase at the error path.
Affected versions
Fixed in
6.6.151,
6.12.103,
6.18.44,
7.1.8,
7.2-rc6
and their respective stable series.
References
5 totalFrequently asked questions
-
What is CVE-2026-74505?
CVE-2026-74505 is a unscored severity Linux kernel vulnerability . CVE-2026-74505 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2026-74505?
Yes. CVE-2026-74505 has been patched. Fixed versions include 6.6.151, 6.12.103, 6.18.44 and others.
-
Is CVE-2026-74505 actively exploited?
No. CVE-2026-74505 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.